CVE-2026-59158

creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:17+00:00| published-proof-of-concept| https://github.com/thoda-dev/nuxt-ollama/security/advisories/GHSA-fxg7-897c-57mp...

NPM: Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

NPM: Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients vulnerability discovered by ? in WordPress Npm nuxt-ollama versions = 1.2.26, 1.3.1...

GHSA-FXG7-897C-57MP Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options — including apikey — into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payload...

Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options — including apikey — into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payload...

PT-2026-89210

Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options — including api key — into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payloa...